Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d/29a0033e-011d-388f-8797-7e1f26f33d84.roa
File:                     29a0033e-011d-388f-8797-7e1f26f33d84.roa (raw, json)
Hash identifier:          oaE+V818Pq6dDsRxMhSuHYrPhA7HuaageSa7wA3+kA4=
Subject key identifier:   19:32:D7:03:61:19:BD:C7:4F:44:11:99:2F:C8:BF:14:DE:0F:38:A7
Certificate issuer:       /CN=d9bb608e-c60e-4ceb-b32a-f101c944038d
Certificate serial:       010D0C9F4328584D667A51FA149F7809E101ACC0
Authority key identifier: 2D:B4:40:F1:19:22:37:C9:81:F0:FE:41:F6:20:D0:F9:98:47:E4:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d/29a0033e-011d-388f-8797-7e1f26f33d84.roa
Signing time:             Sun 05 Apr 2026 01:00:24 +0000
ROA not before:           Sun 05 Apr 2026 01:00:24 +0000
ROA not after:            Sat 04 Jul 2026 01:00:24 +0000
asID:                     395354
IP address blocks:        205.201.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d/d9bb608e-c60e-4ceb-b32a-f101c944038d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d/d9bb608e-c60e-4ceb-b32a-f101c944038d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:66:7a:51:fa:14:9f:78:09:e1:01:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9bb608e-c60e-4ceb-b32a-f101c944038d
        Validity
            Not Before: Apr  5 01:00:24 2026 GMT
            Not After : Jul  4 01:00:24 2026 GMT
        Subject: CN=9143a241-49b1-46e4-9529-d44162954a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0a:fd:53:e2:c8:d0:1b:77:e2:71:95:72:4e:
                    88:b3:fc:b7:7c:99:f9:f2:16:b5:6e:73:58:b6:d0:
                    1e:ee:f8:bd:9d:49:6e:45:d6:59:0f:73:6f:e6:bc:
                    28:6f:e7:50:51:bf:08:35:11:9d:5d:cc:46:9a:9c:
                    fc:2e:a5:80:d9:b6:c7:a4:ad:f6:f8:df:f8:bc:e7:
                    20:ca:f5:32:be:64:9f:ca:20:ca:ca:35:97:1d:9a:
                    f1:4b:fc:ba:64:1a:a6:2a:8b:03:63:9d:f5:94:42:
                    96:c8:60:63:b4:93:59:01:cc:ee:be:91:37:5a:93:
                    a2:6d:2f:8a:f9:eb:24:d1:54:db:fe:a4:da:21:b9:
                    de:31:87:82:60:25:f4:15:4e:6f:41:d9:80:d0:ca:
                    1a:46:23:2a:d8:8f:08:8f:ee:79:87:c7:a0:32:88:
                    70:1a:b4:ee:3d:23:15:5b:5c:87:b2:4c:62:db:0c:
                    dc:4c:f8:f0:cf:34:91:04:b9:46:15:1f:31:ae:38:
                    27:52:77:86:1e:fb:e2:cc:be:50:59:ff:9e:77:4f:
                    0f:cc:c4:09:27:3a:24:0e:cf:88:31:f1:fa:10:79:
                    31:4f:d6:e8:0b:77:69:d2:04:b2:f6:ba:48:b0:54:
                    0e:3a:82:b5:61:87:6e:f9:d9:f3:09:93:78:59:aa:
                    3f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:32:D7:03:61:19:BD:C7:4F:44:11:99:2F:C8:BF:14:DE:0F:38:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d/29a0033e-011d-388f-8797-7e1f26f33d84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d/d9bb608e-c60e-4ceb-b32a-f101c944038d.crl

            X509v3 Authority Key Identifier:
                keyid:2D:B4:40:F1:19:22:37:C9:81:F0:FE:41:F6:20:D0:F9:98:47:E4:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.201.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:81:32:4f:fc:3b:90:d5:d5:66:a5:64:7e:f7:45:82:78:cb:
         b3:b1:dd:1a:50:e1:f0:fb:c6:b7:c5:b3:81:16:56:0d:0c:bb:
         4f:60:27:4e:ac:08:60:88:eb:35:ee:08:04:f7:c3:62:e5:84:
         b2:a6:cb:b2:52:75:dc:8c:36:b8:39:63:fa:a1:d3:0e:90:fc:
         5f:df:a3:98:36:68:ac:85:da:1e:30:5f:7e:b7:2b:33:5d:15:
         a4:25:43:19:75:33:5e:bc:23:6c:20:e7:5b:f9:8d:d3:a1:cf:
         83:08:53:c9:96:07:9e:25:29:a2:ca:4f:e9:e1:b3:0b:8c:e4:
         f7:b7:d6:7a:33:04:0a:c6:12:38:8e:43:5c:37:02:c9:c6:a1:
         e0:fa:13:bf:55:b4:5c:2f:54:e7:e9:b6:f6:12:cd:ff:5a:cb:
         82:2d:c5:b2:ba:8a:27:96:7e:7d:5b:95:85:19:fb:5a:fe:28:
         23:8b:e4:d6:90:76:f4:20:5a:c2:77:27:6a:ea:4b:df:c3:07:
         7a:01:81:82:dd:9d:8e:a6:91:14:a0:bf:d1:3b:8f:3a:8d:eb:
         e2:20:86:d0:da:5e:4d:33:94:3c:08:ac:90:61:e2:cb:81:9c:
         ea:0a:15:b4:ef:de:ec:28:ba:e8:b7:b3:99:54:34:b6:5d:2c:
         51:8b:54:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:00:31 2026 by rpki-client